
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/3fe1872f-3cba-3c20-b66d-3a50b267d26e.roa
File: 3fe1872f-3cba-3c20-b66d-3a50b267d26e.roa (raw, json)
Hash identifier: 8KXWvRCKOMe4yzABioZ+a2jWxabdqDiogAegA95FNU0=
Subject key identifier: E1:49:93:31:45:0B:8E:9D:A7:8C:DF:80:D8:65:C5:2C:88:01:C9:7C
Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial: 010D0C9F4328584DC35D937DE4CABA2301E65380
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/3fe1872f-3cba-3c20-b66d-3a50b267d26e.roa
Signing time: Fri 08 May 2026 07:32:45 +0000
ROA not before: Fri 08 May 2026 07:32:45 +0000
ROA not after: Thu 06 Aug 2026 07:32:45 +0000
asID: 153671
IP address blocks: 208.123.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c3:5d:93:7d:e4:ca:ba:23:01:e6:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Validity
Not Before: May 8 07:32:45 2026 GMT
Not After : Aug 6 07:32:45 2026 GMT
Subject: CN=14ef9640-8b1e-4801-beca-7a384cfe0ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:0d:c5:7d:e6:38:31:47:c5:43:45:b1:7f:
fc:60:26:b5:1f:b3:38:16:cf:75:4e:df:2a:06:7e:
31:7b:15:84:30:24:32:f3:6a:d0:3e:02:e7:f4:04:
fe:fe:0a:a8:13:89:36:a7:80:80:21:ce:1a:c2:6f:
8c:8d:9e:e7:ba:6a:3c:e8:d4:ab:eb:8a:2e:6b:ac:
a8:6c:7c:61:21:30:83:58:fc:bc:6d:60:5b:87:95:
bd:81:94:c2:08:5d:b8:b8:89:af:c8:47:31:49:69:
86:46:83:41:c3:77:15:ea:ea:39:2e:e7:63:1e:9e:
c6:39:83:af:a7:59:71:64:6f:81:74:f9:4d:5e:d9:
06:99:23:72:cf:b1:7d:95:f2:ad:0d:a2:ad:71:23:
39:5b:fd:76:6c:ec:a2:31:b0:ff:6d:36:5f:95:7f:
c7:dd:52:f6:53:b9:04:15:f8:2f:aa:89:6e:2d:12:
8a:4e:6e:a1:b3:85:06:c7:47:69:03:ac:b5:2b:b4:
9d:71:55:e0:ad:99:5b:a5:f7:b1:db:16:27:60:55:
b8:a8:fc:73:c8:b8:3b:00:db:3a:e2:4b:0f:5b:54:
b1:4e:6e:05:61:e0:ad:98:93:0b:ed:38:d3:40:4c:
3f:05:6b:76:31:57:7a:e8:c3:dd:29:2f:08:95:57:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:49:93:31:45:0B:8E:9D:A7:8C:DF:80:D8:65:C5:2C:88:01:C9:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/3fe1872f-3cba-3c20-b66d-3a50b267d26e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
X509v3 Authority Key Identifier:
keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
208.123.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:fd:fe:cb:10:8d:d8:53:bd:10:d8:6e:bf:ed:8c:97:3a:0b:
24:7d:38:70:47:1d:b9:f9:28:ef:af:68:4b:28:52:21:53:d3:
7a:b5:58:2d:6a:72:78:63:c0:bd:ac:36:10:0a:a5:d0:43:74:
af:13:7b:5a:fd:b4:5d:36:ef:71:94:a2:21:fb:08:70:37:db:
cc:cf:10:1d:8e:95:5a:86:41:5d:fd:e9:ff:b7:1b:57:97:94:
56:82:c1:0f:eb:25:e0:28:5f:ed:71:1a:00:8a:c0:84:00:bc:
0f:8e:80:d0:ff:11:33:6f:5b:0d:c2:44:af:51:fd:9d:2d:ef:
16:11:fc:0e:6d:c6:57:50:e2:36:bb:3d:5d:45:2e:0e:69:85:
e1:21:1c:ce:18:b9:af:03:07:fb:b4:81:1a:72:a0:18:cf:ef:
ef:55:2a:93:35:b6:69:d1:51:3c:65:a3:9f:d9:64:a6:16:d9:
cd:35:97:5f:f8:f2:92:96:f4:e0:2a:d0:44:14:0f:34:4f:9c:
b8:7d:ff:04:98:cc:5f:24:ab:bb:57:06:04:06:80:5d:19:cc:
4d:21:9f:2a:cd:da:90:9c:d4:f2:55:a5:d6:3e:d3:43:98:d2:
ca:27:f0:0d:5f:b3:dc:4e:50:cb:25:fd:c4:6f:11:18:e1:31:
0a:aa:7a:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3DXZN95Mq6IwHmU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI2MDUwODA3MzI0NVoXDTI2MDgwNjA3MzI0NVowLzEtMCsGA1UEAxMk
MTRlZjk2NDAtOGIxZS00ODAxLWJlY2EtN2EzODRjZmUwYWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCwNxX3mODFHxUNFsX/8YCa1H7M4Fs91Tt8q
Bn4xexWEMCQy82rQPgLn9AT+/gqoE4k2p4CAIc4awm+MjZ7numo86NSr64oua6yo
bHxhITCDWPy8bWBbh5W9gZTCCF24uImvyEcxSWmGRoNBw3cV6uo5LudjHp7GOYOv
p1lxZG+BdPlNXtkGmSNyz7F9lfKtDaKtcSM5W/12bOyiMbD/bTZflX/H3VL2U7kE
FfgvqoluLRKKTm6hs4UGx0dpA6y1K7SdcVXgrZlbpfex2xYnYFW4qPxzyLg7ANs6
4ksPW1SxTm4FYeCtmJML7TjTQEw/BWt2MVd66MPdKS8IlVe23wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFJkzFFC46dp4zfgNhlxSyIAcl8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvM2ZlMTg3MmYtM2NiYS0z
YzIwLWI2NmQtM2E1MGIyNjdkMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HveMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAr9/ssQjdhTvRDYbr/tjJc6CyR9OHBHHbn5KO+vaEsoUiFT03q1WC1q
cnhjwL2sNhAKpdBDdK8Te1r9tF0273GUoiH7CHA328zPEB2OlVqGQV396f+3G1eX
lFaCwQ/rJeAoX+1xGgCKwIQAvA+OgND/ETNvWw3CRK9R/Z0t7xYR/A5txldQ4ja7
PV1FLg5pheEhHM4Yua8DB/u0gRpyoBjP7+9VKpM1tmnRUTxlo5/ZZKYW2c01l1/4
8pKW9OAq0EQUDzRPnLh9/wSYzF8kq7tXBgQGgF0ZzE0hnyrN2pCc1PJVpdY+00OY
0son8A1fs9xOUMsl/cRvERjhMQqqeuM=
-----END CERTIFICATE-----
Generated at Wed May 13 06:11:40 2026 by rpki-client